From owner-freebsd-security@FreeBSD.ORG Wed Apr 21 05:23:02 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C76D6106564A for ; Wed, 21 Apr 2010 05:23:02 +0000 (UTC) (envelope-from tjg@soe.ucsc.edu) Received: from mail-01.cse.ucsc.edu (mail-01.cse.ucsc.edu [128.114.48.32]) by mx1.freebsd.org (Postfix) with ESMTP id AFB258FC22 for ; Wed, 21 Apr 2010 05:23:02 +0000 (UTC) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail-01.cse.ucsc.edu (Postfix) with ESMTP id 610A01008BF1; Tue, 20 Apr 2010 22:23:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at mail-01.cse.ucsc.edu Received: from mail-01.cse.ucsc.edu ([127.0.0.1]) by localhost (mail-01.cse.ucsc.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RFuy7IlCw32Q; Tue, 20 Apr 2010 22:23:02 -0700 (PDT) Received: from mail-01.cse.ucsc.edu (mail-01.cse.ucsc.edu [128.114.48.32]) by mail-01.cse.ucsc.edu (Postfix) with ESMTP id 417951008BF0; Tue, 20 Apr 2010 22:23:02 -0700 (PDT) Date: Tue, 20 Apr 2010 22:23:02 -0700 (PDT) From: Tim Gustafson To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= Message-ID: <258059512.789871271827382221.JavaMail.root@mail-01.cse.ucsc.edu> In-Reply-To: <867ho1mzd7.fsf@ds4.des.no> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [98.234.59.118] X-Mailer: Zimbra 5.0.20_GA_3127.RHEL5_64 (ZimbraWebClient - FF3.0 ([unknown])/5.0.20_GA_3127.RHEL5_64) Cc: freebsd-security@freebsd.org Subject: Re: OpenSSL 0.9.8k -> 0.9.8l X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Apr 2010 05:23:02 -0000 > RELENG_8_0 is 8.0 + critical bug fixes. >From what I gather, the exploits in 0.9.8k are pretty serious. :\ > If you're not too pressed for time, 8.1 is "only" a couple of > months away and will hopefully ship with 0.9.8n which is what > we currently have in head. Well, we may have to wait, or maybe update to RELENG_8 and cross our fingers. :) Tim Gustafson Baskin School of Engineering UC Santa Cruz tjg@soe.ucsc.edu 831-459-5354